Your message dated Tue, 30 May 2017 22:42:22 +0100
with message-id <20170530214222.nmazjiv542owq...@powdarrmonkey.net>
and subject line Re: Bug#863626: unblock: dns-root-data/2017041101
has caused the Debian Bug report #863626,
regarding unblock: dns-root-data/2017041101
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact ow...@bugs.debian.org
immediately.)
--
863626: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=863626
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems
--- Begin Message ---
Package: release.debian.org
Severity: normal
User: release.debian....@packages.debian.org
Usertags: unblock
Please unblock package dns-root-data
Dear release team,
the 2017041101 update of dns-root-data package contains:
- fixes to parse_root_data.sh script to unfail the non-dash
shells - closes RC bug #862252 (use printf instead of echo command)
- update root.hints to 2017041101 version (no other change then version though)
- update root.key and d/rules to strip any timestamp, so the build is
more or less reproducible (the get_orig_source still depends on
upstream data at the time of the build, but it should be more
reliable)
- little fixes to parse_root_data.sh script, as suggested by shellcheck:
+ use read -r instead of read on xml2 output data
+ use [:upper:]/[:lower:] instead of [A-Z]/[a-z] as tr argument
+ use [ a ] || [ b ] syntax instead of [ a -o b ]
unblock dns-root-data/2017041101
-- System Information:
Debian Release: 9.0
APT prefers testing
APT policy: (990, 'testing'), (500, 'unstable-debug'), (500,
'testing-debug'), (500, 'unstable'), (1, 'experimental-debug'), (1,
'experimental')
Architecture: amd64
(x86_64)
Kernel: Linux 4.4.0-67-generic (SMP w/24 CPU cores)
Locale: LANG=en_DK.UTF-8, LC_CTYPE=en_DK.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 3.0 (native)
Source: dns-root-data
Binary: dns-root-data
Architecture: all
Version: 2017041101
Maintainer: Debian DNS Maintainers <pkg-dns-de...@lists.alioth.debian.org>
Uploaders: Ondřej Surý <ond...@debian.org>, Robert Edmonds <edmo...@debian.org>
Homepage: https://data.iana.org/root-anchors/
Standards-Version: 3.9.6
Vcs-Browser: http://git.debian.org/?p=pkg-dns/dns-root-data.git;a=summary
Vcs-Git: git://git.debian.org/pkg-dns/dns-root-data.git
Build-Depends: debhelper (>= 8.0.0), unbound-anchor, openssl, ldnsutils, xml2
Package-List:
dns-root-data deb misc optional arch=all
Checksums-Sha1:
36bfc25763062a4ccc784ced1d821faf8a3f442e 14316 dns-root-data_2017041101.tar.xz
Checksums-Sha256:
c88bb15f1e16dba1a525928e190999fdc70b16d06e40f2aa9c7b81c4740c30d5 14316
dns-root-data_2017041101.tar.xz
Files:
4982844cb0e3b0223fdc93bf9671adc3 14316 dns-root-data_2017041101.tar.xz
-----BEGIN PGP SIGNATURE-----
iQKTBAEBCgB9FiEEMLkz2A/OPZgaLTj7DJm3DvT8uwcFAlksENtfFIAAAAAALgAo
aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldDMw
QjkzM0Q4MEZDRTNEOTgxQTJEMzhGQjBDOTlCNzBFRjRGQ0JCMDcACgkQDJm3DvT8
uwf1vA/9HNXfzN7Z8tUuDm40HsXrCR6vK1KfGpcsoYkqZtyqEnkCSwCjzBCpuXzd
IO9bVVzQaUkzvxVK8Gq0hJaKri7BUKmgRTg9v8MmcIoqmmyi3TIxU5NFUbTgFwaj
qy47bq/gNVJUrYGQJssSE70fHv1iCwWT3Y3xHNdNJfkjiOqIgqgJwB7RzXcPZjgF
ZqzUWelV6vDUE1OsOCo2a8hLRGZa11qK/mbZ8eBhYOwVzf6S/z/tZ7L2y2oUEC3J
u2et1PweqCmQPNC2Xs9KRya9XdFBuMRt4x3EPHygG0u8sziioVaHeNgfNP66gU2g
FlADNfrgS7KLTwXlfHkJ1JLW5/9Zbce3HFdfNGBwESxWSPLJRhCVcycN3N/71T/h
aycV57+hG+rHGOsCdNa9c79KrriikrokBilA31NDmOH77wk6g88EhYtvG7TRbd3S
sCAYPdk06aIAz2V8nMOXATag5iLRrtdlcJaqvmpfB2NyrXWXOlgb0mTc912ACY6B
seDPD3OAmVG5ubOUkBSMyQj7tabjOKkHu+ioYOs3AEYVyIlFxfvle4GwPb6XLaze
gaf5ECU4UdZb/7ARKcX3PEL/UQXxIH3F7CExliqQZ/kqqXD0nWcS16I/BuW+YkwP
86k6ofr1/oxiHbdkFEQvSAocbv2GN74jO2R1Q6p7ptv7K4Ey8Og=
=pbH7
-----END PGP SIGNATURE-----
diff -Nru dns-root-data-2017020200/debian/changelog
dns-root-data-2017041101/debian/changelog
--- dns-root-data-2017020200/debian/changelog 2017-03-22 09:06:08.000000000
+0100
+++ dns-root-data-2017041101/debian/changelog 2017-05-29 14:05:37.000000000
+0200
@@ -1,3 +1,12 @@
+dns-root-data (2017041101) unstable; urgency=medium
+
+ * Fix parse-root-anchors.sh in non-dash shells (Closes: #862252)
+ * Update to 2017041101 version of root zone
+ * Remove timestamps from root.key to make the build reproducible
+ * Shell syntax cleanup
+
+ -- Ondřej Surý <ond...@debian.org> Mon, 29 May 2017 14:05:37 +0200
+
dns-root-data (2017020200) unstable; urgency=medium
* Update to 2016102001 version of the root.zone
diff -Nru dns-root-data-2017020200/debian/rules
dns-root-data-2017041101/debian/rules
--- dns-root-data-2017020200/debian/rules 2017-03-22 09:06:08.000000000
+0100
+++ dns-root-data-2017041101/debian/rules 2017-05-29 14:05:37.000000000
+0200
@@ -32,6 +32,6 @@
/usr/sbin/unbound-anchor \
-a $(CURDIR)/root-auto.key \
-c $(CURDIR)/icannbundle.pem || echo "Check the root-auto.key"
- < root-auto.key grep -Ev "^($$|;)" > root.key
+ < root-auto.key grep -Ev "^($$|;)" | sed -e 's/ ;;count=.*//' > root.key
rm root-auto.key
wget -O $(CURDIR)/root.hints "http://www.internic.net/domain/named.root";
diff -Nru dns-root-data-2017020200/parse-root-anchors.sh
dns-root-data-2017041101/parse-root-anchors.sh
--- dns-root-data-2017020200/parse-root-anchors.sh 2017-03-22
09:06:08.000000000 +0100
+++ dns-root-data-2017041101/parse-root-anchors.sh 2017-05-29
14:05:37.000000000 +0200
@@ -5,19 +5,19 @@
TTL=172800
export IFS="="
-xml2 | while read KEY VAL; do
+xml2 | while read -r KEY VAL; do
case "$KEY" in
"/TrustAnchor/Zone") ZONE="$VAL";;
"/TrustAnchor/KeyDigest/KeyTag") KTAG="$VAL";;
"/TrustAnchor/KeyDigest/Algorithm") ALGO="$VAL";;
"/TrustAnchor/KeyDigest/DigestType") DTYPE="$VAL";;
"/TrustAnchor/KeyDigest/Digest")
- DIGEST="$(echo "$VAL" | tr "[A-Z]" "[a-z]")"
- if [ -z "$ZONE" -o -z "$KTAG" -o -z "$ALGO" -o -z "$DTYPE" ]; then
+ DIGEST="$(echo "$VAL" | tr "[:upper:]" "[:lower:]")"
+ if [ -z "$ZONE" ] || [ -z "$KTAG" ] || [ -z "$ALGO" ] || [ -z
"$DTYPE" ]; then
echo "Missing some KeyDigest parameter"
exit 1
fi
- echo "$ZONE\t$TTL\tIN\tDS\t$KTAG $ALGO $DTYPE $DIGEST"
+ printf "%s\t%s\tIN\tDS\t%s %s %s %s\n" "$ZONE" "$TTL" "$KTAG"
"$ALGO" "$DTYPE" "$DIGEST"
unset KTAG ALGO DTYPE DIGEST
;;
esac
diff -Nru dns-root-data-2017020200/root.hints
dns-root-data-2017041101/root.hints
--- dns-root-data-2017020200/root.hints 2017-03-22 09:06:08.000000000 +0100
+++ dns-root-data-2017041101/root.hints 2017-05-29 14:05:37.000000000 +0200
@@ -9,8 +9,8 @@
; on server FTP.INTERNIC.NET
; -OR- RS.INTERNIC.NET
;
-; last update: October 20, 2016
-; related version of root zone: 2016102001
+; last update: April 11, 2017
+; related version of root zone: 2017041101
;
; formerly NS.INTERNIC.NET
;
diff -Nru dns-root-data-2017020200/root.key dns-root-data-2017041101/root.key
--- dns-root-data-2017020200/root.key 2017-03-22 09:06:08.000000000 +0100
+++ dns-root-data-2017041101/root.key 2017-05-29 14:05:37.000000000 +0200
@@ -1,2 +1,2 @@
-. 172800 IN DNSKEY 257 3 8
AwEAAagAIKlVZrpC6Ia7gEzahOR+9W29euxhJhVVLOyQbSEW0O8gcCjFFVQUTf6v58fLjwBd0YI0EzrAcQqBGCzh/RStIoO8g0NfnfL2MTJRkxoXbfDaUeVPQuYEhg37NZWAJQ9VnMVDxP/VHL496M/QZxkjf5/Efucp2gaDX6RS6CXpoY68LsvPVjR0ZSwzz1apAzvN9dlzEheX7ICJBBtuA6G3LQpzW5hOA2hzCTMjJPJ8LbqF6dsV6DoBQzgul0sGIcGOYl7OyQdXfZ57relSQageu+ipAdTTJ25AsRTAoub8ONGcLmqrAmRLKBP1dfwhYB4N7knNnulqQxA+Uk1ihz0=
;{id = 19036 (ksk), size = 2048b} ;;state=2 [ VALID ] ;;count=0
;;lastchange=1490169621 ;;Wed Mar 22 09:00:21 2017
+. 172800 IN DNSKEY 257 3 8
AwEAAagAIKlVZrpC6Ia7gEzahOR+9W29euxhJhVVLOyQbSEW0O8gcCjFFVQUTf6v58fLjwBd0YI0EzrAcQqBGCzh/RStIoO8g0NfnfL2MTJRkxoXbfDaUeVPQuYEhg37NZWAJQ9VnMVDxP/VHL496M/QZxkjf5/Efucp2gaDX6RS6CXpoY68LsvPVjR0ZSwzz1apAzvN9dlzEheX7ICJBBtuA6G3LQpzW5hOA2hzCTMjJPJ8LbqF6dsV6DoBQzgul0sGIcGOYl7OyQdXfZ57relSQageu+ipAdTTJ25AsRTAoub8ONGcLmqrAmRLKBP1dfwhYB4N7knNnulqQxA+Uk1ihz0=
;{id = 19036 (ksk), size = 2048b} ;;state=2 [ VALID ]
. 172800 IN DNSKEY 257 3 8
AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlExOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgCmr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnXGXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU=
;{id = 20326 (ksk), size = 2048b} ;;state=0 [ START ]
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Mon, 29 May 2017 14:05:37 +0200
Source: dns-root-data
Binary: dns-root-data
Architecture: source
Version: 2017041101
Distribution: unstable
Urgency: medium
Maintainer: Debian DNS Maintainers <pkg-dns-de...@lists.alioth.debian.org>
Changed-By: Ondřej Surý <ond...@debian.org>
Description:
dns-root-data - DNS root data including root zone and DNSSEC key
Closes: 862252
Changes:
dns-root-data (2017041101) unstable; urgency=medium
.
* Fix parse-root-anchors.sh in non-dash shells (Closes: #862252)
* Update to 2017041101 version of root zone
* Remove timestamps from root.key to make the build reproducible
* Shell syntax cleanup
Checksums-Sha1:
22e3448e5f2705b2eb8bce574c64c7690f08b543 1905 dns-root-data_2017041101.dsc
36bfc25763062a4ccc784ced1d821faf8a3f442e 14316 dns-root-data_2017041101.tar.xz
4f7dec4a2cd50068b672cfa00397693dbf45aa85 5946
dns-root-data_2017041101_amd64.buildinfo
Checksums-Sha256:
1f3c5b391d93da9789e2914671bbc75bfb6853a198ffca45b9d5292a308ab748 1905
dns-root-data_2017041101.dsc
c88bb15f1e16dba1a525928e190999fdc70b16d06e40f2aa9c7b81c4740c30d5 14316
dns-root-data_2017041101.tar.xz
ce30c74920a986730e746d0e7213afa7b3f5609e86b0adf343b22effd17560fb 5946
dns-root-data_2017041101_amd64.buildinfo
Files:
cec66a2e89c12b0f03cca9bdfab5f4e1 1905 misc optional
dns-root-data_2017041101.dsc
4982844cb0e3b0223fdc93bf9671adc3 14316 misc optional
dns-root-data_2017041101.tar.xz
08531207764c72a7912f969b68174ebd 5946 misc optional
dns-root-data_2017041101_amd64.buildinfo
-----BEGIN PGP SIGNATURE-----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=RivQ
-----END PGP SIGNATURE-----
--- End Message ---
--- Begin Message ---
On Mon, May 29, 2017 at 03:59:32PM +0200, Ondřej Surý wrote:
> (e.g. in fact it was a removal of ICANN-copyright document)
So it is, apologies (let's just call it unblock fatigue). The rest seem
reasonable to trade for the RC fix; unblocked.
Thanks,
--
Jonathan Wiltshire j...@debian.org
Debian Developer http://people.debian.org/~jmw
4096R: 0xD3524C51 / 0A55 B7C5 1223 3942 86EC 74C3 5394 479D D352 4C51
--- End Message ---
